Data breach at DoorDash sees 4.9 million users’ personal information stolen

An undisclosed number of Canadians are among the roughly 4.9 million DoorDash users, drivers and merchants who had their personal information stolen during a May data breach — the latest in a string of privacy scares in recent years.

“We don’t discuss overall user, merchant or Dasher numbers publicly,” wrote spokesperson Mattie Magdovitz in an email when asked how many of the millions impacted were in Canada.

Those whose information was compromised would have been contacted directly by the company, Magdovitz said.

The California-based company is encouraging users to change their passwords via a dedicated reset site, and has set up a call centre for round-the-clock support.

“… Out of an abundance of caution, we are encouraging all of those affected to reset their passwords to one that is unique to DoorDash,” reads an email received by a Canadian customer in Toronto.

The company operates in Toronto, as well as Calgary, Edmonton, Ottawa, Montreal, Regina, Vancouver, Winnipeg and several other Canadian cities.

But the company said only some — not all — of those who started using the app on or after April 5, 2018 were affected.

“For security reasons and because our investigation is still ongoing, I cannot get into specific details,” wrote Magdovitz, when asked why that particular date marked the cutoff.

The date is prior to the company launching operations in some of its Canadian locations. DoorDash became available in Winnipeg this May, for example, and Montreal in August.

Earlier in September, the company noticed what it called “unusual activity involving a third-party service provider,” it said in a statement posted to its blog Thursday. It launched an investigation that included outside security experts and determined some DoorDash user data was accessed on May 4.

It “took immediate steps to block further access” by that party and enhanced its security, the company said.

DoorDash notified law enforcement and regulators, and is assisting them in their ongoing investigation, said Magdovitz.

The stolen data may include profile information, such as users’ names, email addresses, delivery addresses and phone numbers. It may also include “hashed, salted passwords,” which the company said make the actual password indecipherable to a third party.

It appears some consumers also had the last four digits of their payment cards taken, while some drivers and merchants had the last four digits of their bank account numbers stolen.

However, the company said the perpetrator or perpetrators did not obtain enough information to make fraudulent charges or withdrawals.

About 100,000 drivers had their driver’s license numbers stolen.

The DoorDash breach is one of several large-scale privacy invasions in recent years.

A data breach at Capital One in July exposed the data of about six million Canadians, including roughly a million social insurance numbers, as well as the data of about 100 million American clients.

In June, Desjardins Group revealed a data breach there affected nearly three million members, including individuals and businesses. Names, addresses, birthdates, social-insurance numbers and other private information was leaked.

And in 2017, some 19,000 Canadians had their data compromised as part of a broader breach at Equifax Inc. The breach impacted nearly 150 million people, including the Canadians.

Just Posted

Alberta eyes more operating rooms, contracts with private clinics for surgeries

CALGARY — Alberta’s health minister says he aims to make the province… Continue reading

One year after arrests, Canadians held in China set to face trial

OTTAWA — As two imprisoned Canadians face trials in Chinese courts where… Continue reading

‘The grief is heavy:’ Alberta First Nation grieving death of five in house fire

ROCHFORT BRIDGE, Alta. — The chief of the Alexis Nakoda Sioux Nation… Continue reading

Calgary teacher cuts can be averted, but provincial audit, review going ahead

CALGARY — The Alberta government is moving ahead with a financial audit… Continue reading

Man who strangled wife, buried body in their Calgary home to stay in prison

BOWDEN, Alta. — A man who strangled his wife and cemented her… Continue reading

Your community calendar

Friday The Annual Old-Fashioned Country Christmas is being held Dec. 13 at… Continue reading

Flames’ win streak at 6 games with 5-2 win over Coyotes

Flames 5 Coyotes 2 GLENDALE, Ariz. — Sean Monahan scored for the… Continue reading

Alberta eyes more operating rooms, contracts with private clinics for surgeries

CALGARY — Alberta’s health minister says he aims to make the province… Continue reading

Sebastian Aho scores twice, Hurricanes beat Oilers 6-3

Hurricanes 6 Oilers 3 EDMONTON — Sebastian Aho had a pair of… Continue reading

One year after arrests, Canadians held in China set to face trial

OTTAWA — As two imprisoned Canadians face trials in Chinese courts where… Continue reading

‘The grief is heavy:’ Alberta First Nation grieving death of five in house fire

ROCHFORT BRIDGE, Alta. — The chief of the Alexis Nakoda Sioux Nation… Continue reading

Calgary teacher cuts can be averted, but provincial audit, review going ahead

CALGARY — The Alberta government is moving ahead with a financial audit… Continue reading

Man who strangled wife, buried body in their Calgary home to stay in prison

BOWDEN, Alta. — A man who strangled his wife and cemented her… Continue reading

Most Read